How do I enable SSL support in Webtrends Analytics 7.5-8.0x?

Products

Webtrends Analytics 8.0x
Webtrends Enterprise 7.5
Webtrends Professional 7.5
Webtrends Small Business 7.5

Cause

This document contains information about updating the SSL certificate for the Webtrends user interface.

Resolution

In order for Webtrends to communicate over SSL the following change must be made:

1. Launch Webtrends
2. Navigate to Administration > System Management > Global Roles.
3. Click the ‘UI Server’ link.
4. Check the ‘Enable SSL’ checkbox.
5. Select OK.
6. Restart services when prompted.

To create a valid certificate for the installation, follow the steps below:

1. Open a command line window and navigate into the following folder:

\Webtrends\common\apache\bin

2. Type the following command:

openssl.exe

The “OpenSSL>” command line appears.

3. Type the following command:

genrsa -des3 -rand ssl.rnd -out server.key 1024

4. The openssl utility prompts for a pass-phrase. Save the pass-phrase in a secure location.

Note: If you want a DSA private key, replace genrsa with gendsa. To encrypt your key with DES rather than 3DES, replace -des3 with -des.

5. Typically, the Apache Web server prompts for a pass-phrase when the server is started. If you want to start Webtrends without manual intervention, complete the following steps:

a. To copy the server key, type the following at the command line:

copy server.key server.key.org

b. Run openssl.exe.

c. At the openssl> prompt, type the following:

rsa -in server.key.org -out server.key

d. Copy the private key to your Apache installation by typing:

copy server.key \Webtrends\common\apache\conf\ssl.key

6. Create a Certificate Signing Request:

a. Run openssl.exe.

b. At the openssl> prompt, type the following:

req -new -config openssl.cnf -key server.key -out server.csr

7. The openssl utility prompts you for a variety of information. Provide information based on your Webtrends installation. This creates the server.csr file. Send this file to a Certificate Authority for signing.

8. When you get a response (signed certificate) from the Certificate Authority, copy the response to your Apache installation using the following command:

copy \Webtrends\common\apache\conf\ssl.crt\server.crt

a. To use a certificate for testing, the certificate request file (.csr) can also be self-signed. From the openssl> prompt, execute the following:

x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

9. Locate the http.conf.txt file in the WTInstallDir\common\apache\conf\ folder. Edit this file and change the following 2 entries:

->SSLCertificateFile conf/ssl.crt/snakeoil-rsa.crt
->SSLCertificateKeyFile conf/ssl.key/snakeoil-rsa.key

to reflect the proper location and file names for the certificate and key.

10. Save the httpd.conf.txt

11. Restart the Webtrends – User Interface service.